Kong 3.6: resty.openssl.auxiliary.nginx doesn't support Nginx version 1025003 about kong

[bungle]

@samugi, I think he is hitting this:
https://github.com/Kong/lua-resty-openssl/blob/master/lib/resty/openssl/auxiliary/nginx.lua#L43-L90

[samugi]

Hello @LukeMccon ,
thank you for reporting this.

I was unable to reproduce the problem you described, here's what I tried:

1. configured postgres to use ssl, setting the ssl = on, ssl_cert_file and ssl_key_file configuration options
2. ran kong migrations bootstrap using KONG_ROLE=control_plane from kong:3.5-ubuntu with appropriate pg_ssl and lua_ssl configuration as described in our docs
3. ran kong migrations --v up using KONG_ROLE=control_plane from kong:3.6-ubuntu (migrations completed successfully)
4. started kong:3.6-ubuntu successfully

Could you share additional details to help us reproduce the problem, i.e. if you have any scripts, docker-compose, etc. that would be very helpful. Thank you!

[fffonion]

Hi @LukeMccon could you share your kong.conf content, the postgres server version (is it higher than 11 and using scram auth?) and if there's any custom plugin that you are using?
And if possible, also the full stack trace for the error you mentioned.

[marco-sciatta]

Same issue here. We have this problem in the waiting-for-db container.
Installed with helm chart without including any custom plugin.

│ Error:                                                                                                                                                │
│ resty.openssl.auxiliary.nginx doesn't support Nginx version 1025003                                                                                   │
│ stack traceback:                                                                                                                                      │
│     [C]: in function 'error'                                                                                                                          │
│     /usr/local/share/lua/5.1/resty/openssl/auxiliary/nginx.lua:89: in main chunk                                                                      │
│     [C]: in function 'require'                                                                                                                        │
│     /usr/local/share/lua/5.1/resty/openssl/ssl.lua:8: in main chunk                                                                                   │
│     [C]: in function 'require'                                                                                                                        │
│     /usr/local/share/lua/5.1/pgmoon/init.lua:397: in function 'auth'                                                                                  │
│     /usr/local/share/lua/5.1/pgmoon/init.lua:268: in function 'connect'                                                                               │
│     .../share/lua/5.1/kong/db/strategies/postgres/connector.lua:215: in function 'connect'                                                            │
│     .../share/lua/5.1/kong/db/strategies/postgres/connector.lua:546: in function 'query'                                                              │
│     .../share/lua/5.1/kong/db/strategies/postgres/connector.lua:296: in function 'init'                                                               │
│     /usr/local/share/lua/5.1/kong/db/init.lua:144: in function 'init_connector'                                                                       │
│     /usr/local/share/lua/5.1/kong/cmd/start.lua:68: in function 'cmd_exec'                                                                            │
│     /usr/local/share/lua/5.1/kong/cmd/init.lua:31: in function </usr/local/share/lua/5.1/kong/cmd/init.lua:31>                                        │
│     [C]: in function 'xpcall'                                                                                                                         │
│     /usr/local/share/lua/5.1/kong/cmd/init.lua:31: in function </usr/local/share/lua/5.1/kong/cmd/init.lua:15>                                        │
│     (command line -e):7: in function 'inline_gen'                                                                                                     │
│     init_worker_by_lua(nginx.conf:204):44: in function <init_worker_by_lua(nginx.conf:204):43>                                                        │
│     [C]: in function 'xpcall'                                                                                                                         │
│     init_worker_by_lua(nginx.conf:204):52: in function <init_worker_by_lua(nginx.conf:204):50>                                                        ```

[duonghanu]

I got the same issue when upgrade from Kong OSS 3.5.0 to 3.6.0 when run migration db process

kong migrations up --vv
Error: resty.openssl.auxiliary.nginx doesn't support Nginx version 1025003 stack traceback: [C]: in function 'error' /usr/local/share/lua/5.1/resty/openssl/auxiliary/nginx.lua:89: in main chunk [C]: in function 'require' /usr/local/share/lua/5.1/resty/openssl/ssl.lua:8: in main chunk [C]: in function 'require' /usr/local/share/lua/5.1/pgmoon/init.lua:397: in function 'auth' /usr/local/share/lua/5.1/pgmoon/init.lua:268: in function 'connect' .../share/lua/5.1/kong/db/strategies/postgres/connector.lua:215: in function 'connect' .../share/lua/5.1/kong/db/strategies/postgres/connector.lua:546: in function 'query' .../share/lua/5.1/kong/db/strategies/postgres/connector.lua:296: in function 'init' /usr/local/share/lua/5.1/kong/db/init.lua:144: in function 'init_connector' /usr/local/share/lua/5.1/kong/cmd/migrations.lua:101: in function 'cmd_exec' /usr/local/share/lua/5.1/kong/cmd/init.lua:31: in function </usr/local/share/lua/5.1/kong/cmd/init.lua:31> [C]: in function 'xpcall' /usr/local/share/lua/5.1/kong/cmd/init.lua:31: in function </usr/local/share/lua/5.1/kong/cmd/init.lua:15> (command line -e):7: in function 'inline_gen' init_worker_by_lua(nginx.conf:132):44: in function <init_worker_by_lua(nginx.conf:132):43> [C]: in function 'xpcall' init_worker_by_lua(nginx.conf:132):52: in function <init_worker_by_lua(nginx.conf:132):50>

[chronolaw]

Hi @LukeMccon , I think that we have fixed this issue in #12665, could you try it again? thanks.

[github-actions]

This issue is marked as stale because it has been open for 14 days with no activity.

[github-actions]

Dear contributor,

We are automatically closing this issue because it has not seen any activity for three weeks.
We're sorry that your issue could not be resolved. If any new information comes up that could
help resolving it, please feel free to reopen it.

Your contribution is greatly appreciated!

Please have a look
our pledge to the community
for more information.

Sincerely,
Your Kong Gateway team

[Water-Melon]

@LukeMccon This issue has been fixed in #12905 and will be released in the next version.

[LukeMccon]

Thank you @Water-Melon @chronolaw and team, confirmed that this issue is fixed in OSS 3.6.1